latitude-cli
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the platform-specific CLI binary from the official GitHub repository
latitude-dev/latitude-llmusing standard tools likecurlor the GitHub CLI (gh). These sources are well-known and consistent with the skill's authorship. - [COMMAND_EXECUTION]: The installation process utilizes standard shell commands (
tar,chmod,mv) to manage the downloaded binary. On macOS, it includes instructions to usexattrto clear the quarantine flag, which is a common requirement for third-party developer tools. - [CREDENTIALS_UNSAFE]: The skill provides detailed guidance on the secure handling of the
LATITUDE_API_KEY. It encourages the use of.envfiles, environment variables, and OS keyrings while explicitly warning against printing secrets in chat logs or shell transcripts.
Audit Metadata